Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '21#.#.205.167':139
- '21#.#.232.205':139
- '21#.#.168.40':139
- '21#.#.103.99':139
- '21#.#.40.196':139
- '21#.#.229.240':139
- '21#.#.42.151':139
- '21#.#.137.35':139
- '21#.#.34.133':139
- '21#.3.35.72':139
- '21#.#.44.223':139
- '21#.#.220.98':139
- '21#.#.46.221':139
- '21#.#.126.111':139
- '21#.3.31.5':139
- '21#.#.155.30':139
- '21#.3.18.72':139
- '21#.#.118.234':139
- '21#.3.7.124':139
- '21#.#.54.140':139
- '21#.#.191.94':139
- '21#.#.46.221':445
- '21#.#.54.140':445
- '21#.#.220.98':445
- '21#.#.155.30':445
- '21#.#.126.111':445
- '21#.#.118.234':445
- '21#.#.44.223':445
- '21#.3.18.72':445
- '21#.#.191.94':445
- '21#.3.7.124':445
- '21#.3.31.5':445
- '21#.#.80.129':139
- '21#.#.218.221':445
- '21#.#.73.168':139
- '21#.#.172.104':139
- '21#.#.139.152':139
- '21#.#.179.146':445
- '21#.#.75.119':445
- '21#.#.19.198':445
- '21#.#.157.31':445
- '21#.#.69.164':445
- '21#.#.30.231':139
- '21#.#.222.61':139
- '21#.#.203.41':139
- '21#.#.157.152':139
- '21#.#.192.157':139
- '21#.#.107.211':445
- '21#.#.34.108':445
- '21#.#.238.114':445
- '21#.#.177.199':445
- '21#.#.107.177':445
- '21#.3.14.56':139
- '21#.#.169.72':139
- '21#.#.154.10':139
- '21#.#.60.107':139
- '21#.#.34.108':139
- '21#.3.63.28':139
- '21#.3.44.82':139
- '21#.#.126.89':139
- '21#.3.91.55':139
- '21#.3.224.3':139
- '21#.#.177.167':139
- '21#.#.222.61':445
- '21#.#.218.221':139
- '21#.#.30.231':445
- '21#.#.192.157':445
- '21#.#.203.41':445
- '21#.#.179.146':139
- '21#.#.75.119':139
- '21#.#.19.198':139
- '21#.#.157.31':139
- '21#.#.69.164':139
- '21#.#.157.152':445
- '21#.#.154.10':445
- '21#.3.224.3':445
- '21#.#.169.72':445
- '21#.3.63.28':445
- '21#.#.60.107':445
- '21#.#.126.89':445
- '21#.3.14.56':445
- '21#.3.44.82':445
- '21#.#.177.167':445
- '21#.3.91.55':445
- '21#.#.103.99':445
- '21#.#.70.163':139
- '21#.3.29.40':139
- '21#.#.37.117':139
- '21#.3.67.98':139
- '21#.#.117.67':139
- '21#.#.104.40':139
- '21#.#.44.195':139
- '21#.3.53.69':139
- '21#.#.42.121':139
- '21#.3.72.37':139
- '21#.3.98.51':445
- '21#.#.212.190':445
- '21#.#.91.227':445
- '21#.3.0.197':445
- '21#.#.35.168':445
- '21#.#.130.239':445
- '21#.3.4.79':445
- '21#.3.51.4':445
- '21#.#.40.111':445
- '21#.#.153.239':445
- '21#.#.109.63':445
- '21#.#.175.146':139
- '21#.#.148.136':139
- '21#.#.102.93':139
- '21#.3.10.0':139
- '21#.3.90.56':139
- '21#.#.30.145':139
- '21#.3.4.212':139
- '21#.#.108.233':139
- '21#.#.243.63':139
- '21#.#.234.32':139
- '21#.#.103.251':139
- '21#.#.31.149':139
- '21#.#.134.42':139
- '21#.#.113.121':139
- '21#.#.77.168':139
- '21#.3.20.71':139
- '21#.#.255.87':139
- '21#.#.118.93':139
- '21#.#.65.161':139
- '21#.3.160.9':139
- '21#.#.208.113':139
- '21#.#.149.186':139
- '21#.3.79.48':139
- '21#.#.49.133':139
- '21#.#.80.129':445
- '21#.#.73.168':445
- '21#.#.26.199':139
- '21#.#.170.54':139
- '21#.#.161.228':139
- '21#.3.55.55':139
- '21#.#.237.245':139
- '21#.#.139.152':445
- '21#.#.232.205':445
- '21#.#.34.133':445
- '21#.#.205.167':445
- '21#.#.40.196':445
- '21#.#.168.40':445
- '21#.#.42.151':445
- '21#.#.172.104':445
- '21#.#.229.240':445
- '21#.3.35.72':445
- '21#.#.137.35':445
- '21#.3.79.48':445
- '21#.3.55.55':445
- '21#.#.149.186':445
- '21#.3.98.51':139
- '21#.#.49.133':445
- '21#.#.170.54':445
- '21#.#.167.169':445
- '21#.#.26.199':445
- '21#.#.237.245':445
- '21#.#.161.228':445
- '21#.3.51.4':139
- '21#.3.0.197':139
- '21#.#.91.227':139
- '21#.#.130.239':139
- '21#.#.167.169':139
- '21#.#.35.168':139
- '21#.#.40.111':139
- '21#.3.4.79':139
- '21#.#.153.239':139
- '21#.#.212.190':139
- '21#.#.109.63':139
- '21#.#.53.130':445
- '21#.#.232.40':445
- '21#.#.46.147':445
- '21#.#.137.199':445
- '21#.#.191.122':445
- '21#.3.1.137':445
- '21#.3.89.1':445
- '21#.#.158.171':445
- '21#.3.0.208':445
- '21#.#.152.10':445
- '21#.3.50.22':445
- '21#.#.113.219':139
- '21#.#.205.83':139
- '21#.#.168.223':139
- '21#.#.103.103':139
- '21#.#.223.214':139
- '21#.#.102.67':139
- '21#.#.21.177':445
- '21#.#.66.191':139
- '21#.#.95.205':139
- '21#.3.31.11':139
- '21#.#.251.86':445
- '21#.#.154.27':445
- '21#.3.81.55':445
- '21#.3.12.79':445
- '21#.#.107.141':445
- '21#.#.252.29':445
- '21#.#.140.251':445
- '21#.#.31.210':445
- '21#.3.12.50':445
- '21#.#.83.247':445
- '21#.#.254.200':445
- '21#.#.181.173':445
- '21#.#.197.81':445
- '21#.3.17.8':445
- '21#.#.96.209':445
- '21#.#.72.165':445
- '21#.#.13.191':445
- '21#.#.201.86':445
- '21#.#.56.162':445
- '21#.#.237.197':445
- '21#.#.69.238':445
- '21#.3.17.8':139
- '21#.#.181.173':139
- '21#.#.72.165':139
- '21#.3.89.1':139
- '21#.#.96.209':139
- '21#.#.56.162':139
- '21#.#.13.191':139
- '21#.#.69.238':139
- '21#.#.197.81':139
- '21#.#.237.197':139
- '21#.3.1.137':139
- '21#.#.191.122':139
- '21#.#.46.147':139
- '21#.#.137.199':139
- '21#.#.21.177':139
- '21#.3.50.22':139
- '21#.#.152.10':139
- '21#.#.158.171':139
- '21#.3.0.208':139
- '21#.#.53.130':139
- '21#.#.232.40':139
- '21#.3.132.1':139
- '21#.#.226.113':139
- '21#.#.172.120':139
- '21#.#.140.251':139
- '21#.#.47.140':139
- '21#.3.75.46':139
- '21#.#.138.63':139
- '21#.#.231.124':139
- '21#.#.214.88':139
- '21#.#.158.220':139
- '21#.#.252.29':139
- '21#.#.107.141':139
- '21#.3.81.55':139
- '21#.3.12.79':139
- '21#.#.201.86':139
- '21#.#.254.200':139
- '21#.#.83.247':139
- '21#.#.31.210':139
- '21#.3.12.50':139
- '21#.#.251.86':139
- '21#.#.154.27':139
- '21#.#.47.140':445
- '21#.3.41.76':445
- '21#.#.33.176':445
- '21#.3.58.75':445
- '21#.#.70.124':139
- '21#.#.199.192':139
- '21#.#.228.56':445
- '21#.#.156.218':445
- '21#.#.231.94':445
- '21#.#.173.45':445
- '21#.3.90.36':445
- '21#.#.249.161':139
- '21#.#.183.228':139
- '21#.3.1.59':139
- '21#.3.54.1':139
- '21#.3.39.63':139
- '21#.#.160.96':139
- '21#.#.202.113':139
- '21#.3.3.189':139
- '21#.#.198.179':139
- '21#.#.63.188':139
- '21#.#.179.103':139
- '21#.#.249.161':445
- '21#.#.70.124':445
- '21#.3.3.189':445
- '21#.#.198.179':445
- '21#.#.202.113':445
- '21#.#.238.114':139
- '21#.#.107.211':139
- '21#.#.107.177':139
- '21#.#.199.192':445
- '21#.#.177.199':139
- '21#.#.179.103':445
- '21#.#.205.197':445
- '21#.3.39.63':445
- '21#.3.3.56':445
- '21#.#.102.19':445
- '21#.3.157.2':445
- '21#.3.1.59':445
- '21#.#.63.188':445
- '21#.#.183.228':445
- '21#.#.160.96':445
- '21#.3.54.1':445
- '21#.3.31.11':445
- '21#.#.66.191':445
- '21#.#.95.205':445
- '21#.#.113.219':445
- '21#.#.205.83':445
- '21#.3.0.208':9988
- '21#.#.158.171':9988
- '21#.#.46.147':9988
- '21#.#.102.67':445
- '21#.3.50.22':9988
- '21#.#.168.223':445
- '21#.#.214.88':445
- '21#.#.158.220':445
- '21#.#.226.113':445
- '21#.#.172.120':445
- '21#.3.132.1':445
- '21#.#.103.103':445
- '21#.#.223.214':445
- '21#.#.138.63':445
- '21#.#.231.124':445
- '21#.3.75.46':445
- '21#.#.231.94':139
- '21#.#.228.56':139
- '21#.3.90.36':139
- '21#.#.33.176':139
- '21#.#.173.45':139
- '21#.3.3.56':139
- '21#.#.205.197':139
- '21#.3.157.2':139
- '21#.#.156.218':139
- '21#.#.102.19':139
- '21#.3.41.76':139
- '21#.#.56.162':9988
- '21#.#.107.141':9988
- '21#.#.197.81':9988
- '21#.#.152.10':9988
- '21#.#.181.173':9988
- '21#.#.103.103':9988
- '21#.3.58.75':139
- '21#.#.231.124':9988
- '21#.#.154.27':9988
- '21#.3.132.1':9988